This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft File: DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft (raw, json) Hash identifier: RhjdaGwRldh+Qr0wGAGfkvS/O7egZBTuQUjz6KS2dKk= Subject key identifier: C3:AD:21:CE:BD:ED:E3:1A:A5:8C:6D:92:A7:2A:41:DC:2C:17:52:C6 Authority key identifier: 0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5 Certificate issuer: /CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5 Certificate serial: 019AF12EADC2E38EE367A26AE54FCB0C19A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft Manifest number: 106D Signing time: Sat 06 Dec 2025 01:02:39 +0000 Manifest this update: Sat 06 Dec 2025 01:02:39 +0000 Manifest next update: Sun 07 Dec 2025 01:02:39 +0000 Files and hashes: 1: DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl (hash: Wnq4QqIDUlnvOrj54uifEpNnmKaBNzhcypdfd2fOKxw=) 2: KSFH2iX9DZf8Q-50ramqag80LYo.roa (hash: N6tvxRZU5FhCXYfq+gSSvyO+LQEuT5uPy32KkqFgDN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:ad:c2:e3:8e:e3:67:a2:6a:e5:4f:cb:0c:19:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5 Validity Not Before: Dec 6 01:02:39 2025 GMT Not After : Dec 7 01:02:39 2025 GMT Subject: CN=c3ad21cebdede31aa58c6d92a72a41dc2c1752c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:95:9a:65:c2:1c:e1:37:74:9a:5d:af:e7:85: 6f:39:95:fc:8c:16:04:ae:86:b6:d0:a8:63:99:6f: 80:c4:aa:0a:5c:d4:af:b5:87:59:60:52:eb:a7:36: ef:38:82:7b:d2:07:2a:03:3a:36:cd:e6:23:89:92: c3:18:d2:6d:a9:68:20:3a:3e:ad:9c:85:c5:0b:98: b1:2f:1a:82:f7:74:38:76:05:fd:d7:69:ff:82:7e: 16:46:58:1b:d5:b4:93:20:e7:d1:c9:c3:c4:c3:dd: b6:c2:da:9e:e5:4e:26:0a:12:c0:16:7d:28:b8:de: 84:a8:84:77:23:af:af:f5:a3:5d:71:a3:e9:45:0f: 38:e2:dc:4e:0b:64:f1:e9:00:7c:95:73:e2:ae:95: 55:9e:27:9a:a4:5b:04:c8:cb:65:10:9d:cc:1c:52: ac:5c:de:0b:b3:b9:2e:41:c3:6d:07:ed:87:c5:38: 8f:c0:29:ab:5c:8e:12:f5:cc:eb:ec:44:84:93:cf: 5c:85:16:69:5f:9e:60:2b:52:75:94:0f:0c:98:6e: c5:77:1c:fa:66:c4:bd:07:23:d8:cd:1a:d8:5c:75: 77:66:dc:53:74:65:2e:af:ba:bb:86:64:03:53:88: 35:16:c8:83:54:f8:46:ad:e6:54:af:d9:8d:d4:a3: 1e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AD:21:CE:BD:ED:E3:1A:A5:8C:6D:92:A7:2A:41:DC:2C:17:52:C6 X509v3 Authority Key Identifier: keyid:0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:e4:ab:b3:f5:75:b8:62:91:6b:89:05:d7:18:43:ea:f6:68: e7:00:e8:4f:7b:db:ef:34:56:78:ed:29:50:b6:19:4f:d2:a2: 83:8d:9a:20:c4:a3:1c:3d:12:e8:6f:e4:89:05:44:eb:e9:56: 41:c1:2c:d3:1d:23:a0:ae:f4:ce:b9:48:03:f1:c2:0d:b3:bb: 06:68:8d:46:22:a3:fa:c1:1b:7e:96:b2:fb:33:49:75:d5:29: 48:7b:36:52:0e:39:d2:43:c0:16:23:ea:58:71:6a:34:55:ca: 2b:12:94:00:f2:1d:c4:b0:1b:0f:40:e0:c9:7e:a7:7f:28:02: 84:b1:3e:34:d2:11:eb:40:e8:ed:da:fc:c3:93:5b:a9:a5:e8: 56:5b:87:1f:9b:45:b9:bc:46:24:0a:0e:6d:7c:22:79:1e:8e: d7:00:2f:55:f3:89:4e:3e:7b:0b:ec:d0:6d:e7:ea:b8:28:37: a5:00:9a:e0:44:d2:cc:56:38:c4:8a:db:55:ca:58:2e:ca:2f: 9c:2e:cd:aa:eb:5c:38:da:0d:b5:e2:bd:df:af:91:dc:b2:b9: 97:dd:ff:29:31:07:74:68:8c:29:85:d7:b7:b8:aa:e5:8d:e7: e6:13:de:58:17:0f:0b:df:1c:b1:df:3e:74:b9:a1:7b:73:4e: ec:78:0b:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLq3C447jZ6Jq5U/LDBmjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZDI3ZmVhM2JhYTNlZjY4MGU4ZjdhMDdhNWYxOTRhYzQ5 ODkyYTUwHhcNMjUxMjA2MDEwMjM5WhcNMjUxMjA3MDEwMjM5WjAzMTEwLwYDVQQD EyhjM2FkMjFjZWJkZWRlMzFhYTU4YzZkOTJhNzJhNDFkYzJjMTc1MmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJWaZcIc4Td0ml2v54VvOZX8jBYE roa20KhjmW+AxKoKXNSvtYdZYFLrpzbvOIJ70gcqAzo2zeYjiZLDGNJtqWggOj6t nIXFC5ixLxqC93Q4dgX912n/gn4WRlgb1bSTIOfRycPEw922wtqe5U4mChLAFn0o uN6EqIR3I6+v9aNdcaPpRQ844txOC2Tx6QB8lXPirpVVnieapFsEyMtlEJ3MHFKs XN4Ls7kuQcNtB+2HxTiPwCmrXI4S9czr7ESEk89chRZpX55gK1J1lA8MmG7Fdxz6 ZsS9ByPYzRrYXHV3ZtxTdGUur7q7hmQDU4g1FsiDVPhGreZUr9mN1KMeEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOtIc697eMapYxtkqcqQdwsF1LGMB8GA1UdIwQY MBaAFAzSf+o7qj72gOj3oHpfGUrEmJKlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE5KXzZqdXFQdmFBNlBlZ2VsOFpTc1NZa3FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81NTMxYTYtOTY0YS00MTllLTk1ZmYt YTYwZjEzMTk4ZDVkLzEvRE5KXzZqdXFQdmFBNlBlZ2VsOFpTc1NZa3FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS81NTMxYTYtOTY0YS00MTllLTk1ZmYtYTYwZjEzMTk4ZDVk LzEvRE5KXzZqdXFQdmFBNlBlZ2VsOFpTc1NZa3FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaeSrs/V1 uGKRa4kF1xhD6vZo5wDoT3vb7zRWeO0pULYZT9Kig42aIMSjHD0S6G/kiQVE6+lW QcEs0x0joK70zrlIA/HCDbO7BmiNRiKj+sEbfpay+zNJddUpSHs2Ug450kPAFiPq WHFqNFXKKxKUAPIdxLAbD0DgyX6nfygChLE+NNIR60Do7dr8w5NbqaXoVluHH5tF ubxGJAoObXwieR6O1wAvVfOJTj57C+zQbefquCg3pQCa4ETSzFY4xIrbVcpYLsov nC7NqutcONoNteK936+R3LK5l93/KTEHdGiMKYXXt7iq5Y3n5hPeWBcPC98csd8+ dLmhe3NO7HgLdA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:11:55 2025 by rpki-client